An information-leakage issue exists on Mimosa Client Radios prior to 2.2.3 and Mimosa Backhaul Radios prior to 2.2.3. There is a page in the web interface that will show you the device's serial number, regardless of whether or not you have logged in. This information-leakage issue is relevant because there is another page (accessible without any authentication) that allows you to remotely factory reset the device simply by entering the serial number.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
mimosa client radios |
||
mimosa backhaul radios |
Vulmon